Rockwell Automation ArmorStart LT
view advisory published 2026-09-03
Successful exploitation of these vulnerabilities could result in a loss of webserver availability or allow an attacker to inject malicious scripts that will be executed when other users access the affected page.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-19472US | — | — | ||
A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. This… | ||||
| CVE-2026-19471US | — | — | ||
Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-26-246-04 JSONself
- ICSA Advisory ICSA-26-246-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationArmorStart LT
Rockwell Automation has corrected this issue in firmware version v2.002, and encourages all users to update to the newest version.
- MitigationArmorStart LT
Rockwell Automation has corrected this issue in firmware version v2.002, and encourages all users to update to the newest version.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan